Data Clean Room Using Defined Access via Native Applications

2. The method of claim 1, wherein the local application comprises an installer script to install a plurality of database objects on the data-consumer database account.

3. The method of claim 2, wherein the data-provider database account generates the local application and shares access with the data-consumer database account to the local application to install the local application on the data-consumer database account.

4. The method of claim 1, further comprising rejecting the one or more fields in response to determining that the one or more fields are not valid, and halting processing of the query.

5. The method of claim 1, wherein the shared dataset is a joined table that is formed from one or more columns of the data-provider protected dataset joined with one or more other columns from the data-consumer database account.

6. The method of claim 1, wherein generating the query comprises replacing terms in the query template with terms input by the data-consumer database account.

7. The method of claim 6, wherein the amount of noise injected is based on an epsilon value, wherein a large epsilon causes less noise to be added and a lower epsilon causes more noise to be added to the query request.

8. The method of claim 1, wherein generating the results data comprises injecting noise data into results data.

9. The method of claim 8, wherein the noise data is injected according to differential privacy that implements a budget parameter that limits an amount of the noise data that is injected.

10. The method of claim 1, wherein the data share policy comprises a row access policy that limits row data of the provider database that is available to the query from the data-consumer database account.

11. The method of claim 10, wherein the row access policy is implemented at a query processing time when the query is received by the data-provider database account.

12. The method of claim 1, further comprising generating a query template, the query template disallowing the application of a first query that includes a first query statement and allowing the application of a second query that includes a single query statement that combines the first query statement with a second query statement, wherein the query includes the single query statement that combines the first query statement with the second query statement, the query template includes the first query statement with the second query statement, and the execution of the query comprising executing the single query statement that combines the first query statement with the second query statement.

14. The computing system of claim 13, wherein the local application comprises an installer script to install a plurality of database objects on the data-consumer database account.

15. The computing system of claim 14, wherein the data-provider database account generates the local application and shares access with the data-consumer database account to the local application to install the local application on the data-consumer database account.

16. The computing system of claim 13, the operations further comprising rejecting the one or more fields in response to determining that the one or more fields are not valid, and halting processing of the query.

17. The computing system of claim 13, wherein the shared dataset is a joined table that is formed from one or more columns of the data-provider protected dataset joined with one or more other columns from the data-consumer database account.

18. The computing system of claim 13, wherein generating the query comprises: replacing terms in the query template with terms input by the consumer database.

19. The computing system of claim 13, wherein generating the results data comprises injecting noise data into results data.

20. The computing system of claim 19, wherein the noise data is injected according to differential privacy that implements a budget parameter that limits an amount of the noise data that is injected.

21. The computing system of claim 13, wherein the data share policy comprises a row access policy that limits row data of the provider database that is available to the query from the consumer database.

22. The computing system of claim 21, wherein the row access policy is implemented at a query processing time when the query is received by the provider database.

24. The non-transitory computer-readable storage medium of claim 23, wherein the local application comprises an installer script to install a plurality of database objects on the data-consumer database account.

25. The non-transitory computer-readable storage medium of claim 23, wherein the data-provider database account generates the local application and shares access with the data-consumer database account to the local application to install the local application on the data-consumer database account.